Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Now my windows 7 is too slow and crashing usually. I checked the start up folder. I get a file with extension .ini. The content of file is


Is this dangerous?

share|improve this question
Is the file called desktop.ini? – CodesInChaos Mar 8 '13 at 17:22
Yes. The file contents you have pasted is that of a typical desktop.ini file that is commonly present in every folder to maintain visual settings of that folder. – void_in Mar 8 '13 at 17:45
up vote 3 down vote accepted

This is a typical Desktop ini file that normally saves the folder view settings such as the background image etc. If suspect some malware is executing on the Windows startup, it might be executing from

  1. Run and RunOnce keys in the registry
  2. Windows Services
  3. Windows drivers
  4. DLL hijacking (placing itself in a path that comes before the legitimate DLL)
  5. Registry key of the registered shell extensions
  6. Hidden file or shortcut in the startup folder

There might be other locations as well so your best bet is quarentine the machine and follow the standard procedure of malware cleanup. You will find plenty of examples on how to cleanup a malware infected machine on SE and other forums.

share|improve this answer

Just to clarify since void_in's answer didn't say it directly. No, that file is perfectly normal and safe. INI files are just configuration files that are used to store settings. They can not be executed on their own, though some viruses can work by adding values to certain INI files to make a legitimate program do their dirty work. The contents of the INI file you have listed appear normal however.

share|improve this answer

protected by Community Feb 9 '15 at 18:58

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.